Trojan.DownLoader45.7598

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-ssb8k.tmp\is-a5j23.tmp
%ProgramFiles(x86)%\viewfd\ini\is-cur5i.tmp
%ProgramFiles(x86)%\viewfd\ini\is-5f0ei.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-atpem.tmp
%ProgramFiles(x86)%\viewfd\lsd\is-2onfm.tmp
%ProgramFiles(x86)%\viewfd\plugins\is-dsqlt.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bdjr8.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ft7l6.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3t0j2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hoiln.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-3683o.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v7057.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fodi2.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-502fm.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l3q26.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kg2lr.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pcjce.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-njb2l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8qubu.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t0mti.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77i5v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-t13hq.tmp
%ProgramFiles(x86)%\viewfd\ini\is-g6ac7.tmp
%ProgramFiles(x86)%\viewfd\ini\is-a3bdc.tmp
%ProgramFiles(x86)%\viewfd\ini\is-600du.tmp
%ProgramFiles(x86)%\viewfd\ini\is-pm0gt.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-pplrj.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-gisr4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-mka62.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-518uv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-09n6o.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-sdc60.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-lv1re.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-glm4q.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-74bb0.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9k51a.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4gatv.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-70bu8.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-fkt93.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-etb7l.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-5t0hp.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-j00qi.tmp
%ProgramFiles(x86)%\viewfd\graphic\transition\is-74mlo.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0vi9v.tmp
%ProgramFiles(x86)%\viewfd\graphic\wavergb\is-abcc8.tmp
%ProgramFiles(x86)%\viewfd\ini\is-3769v.tmp
%ProgramFiles(x86)%\viewfd\ini\is-vg5po.tmp
%ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kffe4.tmp
%ProgramFiles(x86)%\viewfd\graphic\textures\is-ihqpe.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0006.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0pu9r.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ucj6d.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-3bbn1.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-ch0t9.tmp
%ProgramFiles(x86)%\viewfd\url\soft\is-v0gdq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-t71mq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-r3iiu.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-gkjbq.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-p9t5i.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-cqjoe.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-j78i5.tmp
%ProgramFiles(x86)%\viewfd\wallpaper\is-u7br0.tmp
%ProgramFiles(x86)%\viewfd\is-6t9a3.tmp
%ProgramFiles(x86)%\viewfd\graphic\selection\is-1354s.tmp
%ProgramFiles(x86)%\viewfd\is-jf0hf.tmp
%ProgramFiles(x86)%\viewfd\is-np0qj.tmp
%ProgramFiles(x86)%\viewfd\is-te6tc.tmp
%ProgramFiles(x86)%\viewfd\is-o54lh.tmp
%ProgramFiles(x86)%\viewfd\is-3au1k.tmp
%ProgramFiles(x86)%\viewfd\is-32rua.tmp
%ProgramFiles(x86)%\viewfd\is-c9kev.tmp
%ProgramFiles(x86)%\viewfd\is-7068f.tmp
%ProgramFiles(x86)%\viewfd\is-d6r7b.tmp
%ProgramFiles(x86)%\viewfd\unins000.dat
%ProgramFiles(x86)%\viewfd\url\search\is-7a0vd.tmp
%ProgramFiles(x86)%\viewfd\search\is-rfuqg.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-fi7eh.tmp
%ProgramFiles(x86)%\viewfd\search\is-j235l.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1imid.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-a2m0n.tmp
%ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k443f.tmp
%ProgramFiles(x86)%\viewfd\programs\is-466pf.tmp
%ProgramFiles(x86)%\viewfd\radio\is-i79gn.tmp
%ProgramFiles(x86)%\viewfd\radio\is-vf9j8.tmp
%ProgramFiles(x86)%\viewfd\reports\is-9qe75.tmp
%ProgramFiles(x86)%\viewfd\search\is-5h2et.tmp
%ProgramFiles(x86)%\viewfd\search\is-t91av.tmp
%ProgramFiles(x86)%\viewfd\search\is-p041h.tmp
%ProgramFiles(x86)%\viewfd\viewfd.exe
%ProgramFiles(x86)%\viewfd\url\search\is-oublm.tmp
%ProgramFiles(x86)%\viewfd\search\is-8hh3u.tmp
%ProgramFiles(x86)%\viewfd\soft\is-lfspc.tmp
%ProgramFiles(x86)%\viewfd\url\is-b6g3o.tmp
%ProgramFiles(x86)%\viewfd\url\is-coljv.tmp
%ProgramFiles(x86)%\viewfd\url\is-2thib.tmp
%ProgramFiles(x86)%\viewfd\url\is-qt7ce.tmp
%ProgramFiles(x86)%\viewfd\url\is-haeq6.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-j9vn3.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-uqn0v.tmp
%ProgramFiles(x86)%\viewfd\url\help\is-gf1gi.tmp
%ProgramFiles(x86)%\viewfd\url\search\is-lqj3k.tmp
%ProgramFiles(x86)%\viewfd\is-jscgf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-c89ts.tmp
%ProgramFiles(x86)%\viewfd\graphic\metallic\is-o585u.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-q8jbo.tmp
%ProgramFiles(x86)%\viewfd\data\is-ttnqk.tmp
%ProgramFiles(x86)%\viewfd\forms\is-iied8.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-i18jk.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-f121p.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-72pfq.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-m8fq6.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-u2d3c.tmp
%ProgramFiles(x86)%\viewfd\formulas\is-7kbri.tmp
%ProgramFiles(x86)%\viewfd\browser\is-mcbi8.tmp
%ProgramFiles(x86)%\viewfd\graphic\3dturn\is-uib7q.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cfcpr.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-p846t.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-be67d.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-27p68.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-8kcdo.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-47qlf.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-cpg7b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-tnbos.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-t8c9s.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-tljam.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-6t07q.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-7hjng.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-p7qfn.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-l34h7.tmp
%TEMP%\is-c44cj.tmp\_isetup\_setup64.tmp
%TEMP%\is-c44cj.tmp\_isetup\_shfoldr.dll
%TEMP%\is-c44cj.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\viewfd\is-eme4r.tmp
%ProgramFiles(x86)%\viewfd\7-zip\lang\is-2v3uf.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-mkhvq.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-mr5cp.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-4jgcr.tmp
%ProgramFiles(x86)%\viewfd\7-zip\is-6919b.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-l98t3.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-1oc59.tmp
%ProgramFiles(x86)%\viewfd\backup\is-p3v54.tmp
%ProgramFiles(x86)%\viewfd\browser\is-daknr.tmp
%ProgramFiles(x86)%\viewfd\browser\is-29vcj.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-fv7in.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-1an8g.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-b9f9n.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-upvl2.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-qbi7v.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-50r9n.tmp
%ProgramFiles(x86)%\viewfd\colourschemes\is-29d2o.tmp
%TEMP%\is-c44cj.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\viewfd\browser\is-194v4.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-df1kb.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-rhlst.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-snucu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jvviu.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rb945.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-76poe.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-95pl6.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cb0p3.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qkihr.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1uq7u.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ioipk.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d5g2c.tmp
%ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7qmv8.tmp
%ProgramFiles(x86)%\viewfd\graphic\new\is-9qfml.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h6kso.tmp
%ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-mukmh.tmp
%ProgramFiles(x86)%\viewfd\graphic\saturation\is-g9ij3.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rk8k7.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a81l1.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r5t1b.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1i585.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mjiog.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-05khf.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b5sii.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hh8d6.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ir7ki.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-lpbvc.tmp
%ProgramFiles(x86)%\viewfd\graphic\illuminance\is-805pn.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-hl0ap.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-520ne.tmp
%ProgramFiles(x86)%\viewfd\graphic\anyset\is-gcbf6.tmp
%ProgramFiles(x86)%\viewfd\graphic\barrgb\is-834m2.tmp
%ProgramFiles(x86)%\viewfd\graphic\brightness\is-hss9n.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-1tq2b.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-f1tcj.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-jauc3.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-mit6v.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-n60vf.tmp
%ProgramFiles(x86)%\viewfd\graphic\cb\is-bobla.tmp
%ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aptsi.tmp
%ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-jjec6.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-da3kk.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-0ql64.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ect1s.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6ht1p.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-6p0bi.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-ul9fp.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour\is-7pq53.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-lc4gs.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-4rji0.tmp
%ProgramFiles(x86)%\viewfd\graphic\contour2\is-hqen0.tmp
%ProgramFiles(x86)%\viewfd\graphic\grids\is-pec3d.tmp
%TEMP%\lohkos.cab

Moves the following files

from %ProgramFiles(x86)%\viewfd\is-eme4r.tmp to %ProgramFiles(x86)%\viewfd\unins000.exe
from %ProgramFiles(x86)%\viewfd\ini\is-cur5i.tmp to %ProgramFiles(x86)%\viewfd\ini\picture.ini
from %ProgramFiles(x86)%\viewfd\ini\is-5f0ei.tmp to %ProgramFiles(x86)%\viewfd\ini\readme.txt
from %ProgramFiles(x86)%\viewfd\lsd\is-atpem.tmp to %ProgramFiles(x86)%\viewfd\lsd\default.lsd
from %ProgramFiles(x86)%\viewfd\lsd\is-2onfm.tmp to %ProgramFiles(x86)%\viewfd\lsd\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\is-dsqlt.tmp to %ProgramFiles(x86)%\viewfd\plugins\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\is-bdjr8.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\language\russian.lng
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-ft7l6.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\copying
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-3t0j2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\ark32.dll
from %ProgramFiles(x86)%\viewfd\ini\is-t13hq.tmp to %ProgramFiles(x86)%\viewfd\ini\ms office.ini
from %ProgramFiles(x86)%\viewfd\ini\is-g6ac7.tmp to %ProgramFiles(x86)%\viewfd\ini\owner.ini
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-hoiln.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\archive.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-fodi2.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hv3.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-502fm.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jbig.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-l3q26.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\jpeg2000.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-kg2lr.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\openexr.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-pcjce.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\webp.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-njb2l.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\arklicense.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-8qubu.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dir.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-t0mti.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.chm
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-v7057.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\dcraw.plg
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\is-4gatv.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\plugin\hdphoto.plg
from %ProgramFiles(x86)%\viewfd\ini\is-a3bdc.tmp to %ProgramFiles(x86)%\viewfd\ini\mp3 and wma.ini
from %ProgramFiles(x86)%\viewfd\ini\is-600du.tmp to %ProgramFiles(x86)%\viewfd\ini\example2.ini
from %ProgramFiles(x86)%\viewfd\ini\is-pm0gt.tmp to %ProgramFiles(x86)%\viewfd\ini\example1.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-gisr4.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\bricks.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-mka62.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-518uv.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-09n6o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-sdc60.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\embossing4.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-lv1re.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-glm4q.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\grid2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-74bb0.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line1.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-70bu8.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line2.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-pplrj.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\b-a-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-3683o.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\line3.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-fkt93.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\red.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-etb7l.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\viewfd.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-5t0hp.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\y-r-v.bmp
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-j00qi.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\transition\is-74mlo.tmp to %ProgramFiles(x86)%\viewfd\graphic\transition\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavehv\is-0vi9v.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavehv\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\wavergb\is-abcc8.tmp to %ProgramFiles(x86)%\viewfd\graphic\wavergb\readme.txt
from %ProgramFiles(x86)%\viewfd\ini\is-3769v.tmp to %ProgramFiles(x86)%\viewfd\ini\default.ini
from %ProgramFiles(x86)%\viewfd\ini\is-vg5po.tmp to %ProgramFiles(x86)%\viewfd\ini\description.ini
from %ProgramFiles(x86)%\viewfd\graphic\textures\is-ihqpe.tmp to %ProgramFiles(x86)%\viewfd\graphic\textures\purple.bmp
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-77i5v.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.dll
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-9k51a.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.exe
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-i0006.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\pluginst.inf
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-0pu9r.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.ini
from %ProgramFiles(x86)%\viewfd\url\search\is-fi7eh.tmp to %ProgramFiles(x86)%\viewfd\url\search\sputnik.url
from %ProgramFiles(x86)%\viewfd\url\search\is-7a0vd.tmp to %ProgramFiles(x86)%\viewfd\url\search\yandex.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-3bbn1.tmp to %ProgramFiles(x86)%\viewfd\url\soft\oszone.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-ch0t9.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softodrom.url
from %ProgramFiles(x86)%\viewfd\url\soft\is-v0gdq.tmp to %ProgramFiles(x86)%\viewfd\url\soft\softportal.url
from %ProgramFiles(x86)%\viewfd\wallpaper\is-t71mq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\blue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-r3iiu.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkblue.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-gkjbq.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\darkyellow.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-p9t5i.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\silver.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-cqjoe.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\viewfd.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-j78i5.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\white.jpg
from %ProgramFiles(x86)%\viewfd\wallpaper\is-u7br0.tmp to %ProgramFiles(x86)%\viewfd\wallpaper\readme.txt
from %ProgramFiles(x86)%\viewfd\is-jscgf.tmp to %ProgramFiles(x86)%\viewfd\turbosearch.exe
from %ProgramFiles(x86)%\viewfd\is-6t9a3.tmp to %ProgramFiles(x86)%\viewfd\viewfd.exe
from %ProgramFiles(x86)%\viewfd\is-jf0hf.tmp to %ProgramFiles(x86)%\viewfd\bootfd.ini
from %ProgramFiles(x86)%\viewfd\is-np0qj.tmp to %ProgramFiles(x86)%\viewfd\viewfd.ini
from %ProgramFiles(x86)%\viewfd\is-te6tc.tmp to %ProgramFiles(x86)%\viewfd\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\is-o54lh.tmp to %ProgramFiles(x86)%\viewfd\viewfd home site.url
from %ProgramFiles(x86)%\viewfd\is-3au1k.tmp to %ProgramFiles(x86)%\viewfd\readme.html
from %ProgramFiles(x86)%\viewfd\is-32rua.tmp to %ProgramFiles(x86)%\viewfd\keyboard.html
from %ProgramFiles(x86)%\viewfd\is-c9kev.tmp to %ProgramFiles(x86)%\viewfd\unrar.dll
from %ProgramFiles(x86)%\viewfd\url\search\is-lqj3k.tmp to %ProgramFiles(x86)%\viewfd\url\search\google.url
from %ProgramFiles(x86)%\viewfd\url\help\is-gf1gi.tmp to %ProgramFiles(x86)%\viewfd\url\help\subtitles.url
from %ProgramFiles(x86)%\viewfd\url\search\is-oublm.tmp to %ProgramFiles(x86)%\viewfd\url\search\bing.url
from %ProgramFiles(x86)%\viewfd\url\help\is-uqn0v.tmp to %ProgramFiles(x86)%\viewfd\url\help\pictures.url
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-ucj6d.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\readme.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-1imid.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\whatsnew.txt
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-a2m0n.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wcx
from %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\is-k443f.tmp to %ProgramFiles(x86)%\viewfd\plugins\wlx\imagine\imagine.wlx
from %ProgramFiles(x86)%\viewfd\programs\is-466pf.tmp to %ProgramFiles(x86)%\viewfd\programs\readme.txt
from %ProgramFiles(x86)%\viewfd\radio\is-i79gn.tmp to %ProgramFiles(x86)%\viewfd\radio\stations.txt
from %ProgramFiles(x86)%\viewfd\radio\is-vf9j8.tmp to %ProgramFiles(x86)%\viewfd\radio\readme.txt
from %ProgramFiles(x86)%\viewfd\reports\is-9qe75.tmp to %ProgramFiles(x86)%\viewfd\reports\readme.txt
from %ProgramFiles(x86)%\viewfd\search\is-5h2et.tmp to %ProgramFiles(x86)%\viewfd\search\1 hour.ini
from %ProgramFiles(x86)%\viewfd\search\is-t91av.tmp to %ProgramFiles(x86)%\viewfd\search\3 minutes.ini
from %ProgramFiles(x86)%\viewfd\search\is-p041h.tmp to %ProgramFiles(x86)%\viewfd\search\picture.ini
from %ProgramFiles(x86)%\viewfd\search\is-j235l.tmp to %ProgramFiles(x86)%\viewfd\search\sound.ini
from %ProgramFiles(x86)%\viewfd\search\is-rfuqg.tmp to %ProgramFiles(x86)%\viewfd\search\video.ini
from %ProgramFiles(x86)%\viewfd\search\is-8hh3u.tmp to %ProgramFiles(x86)%\viewfd\search\readme.txt
from %ProgramFiles(x86)%\viewfd\soft\is-lfspc.tmp to %ProgramFiles(x86)%\viewfd\soft\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-b6g3o.tmp to %ProgramFiles(x86)%\viewfd\url\demo.txt
from %ProgramFiles(x86)%\viewfd\url\is-coljv.tmp to %ProgramFiles(x86)%\viewfd\url\readme.txt
from %ProgramFiles(x86)%\viewfd\url\is-2thib.tmp to %ProgramFiles(x86)%\viewfd\url\contribute.url
from %ProgramFiles(x86)%\viewfd\url\is-qt7ce.tmp to %ProgramFiles(x86)%\viewfd\url\microsoft.url
from %ProgramFiles(x86)%\viewfd\url\is-haeq6.tmp to %ProgramFiles(x86)%\viewfd\url\virustotal.url
from %ProgramFiles(x86)%\viewfd\url\help\is-j9vn3.tmp to %ProgramFiles(x86)%\viewfd\url\help\iqcomp.url
from %ProgramFiles(x86)%\viewfd\is-7068f.tmp to %ProgramFiles(x86)%\viewfd\viewfd.md5
from %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\is-kffe4.tmp to %ProgramFiles(x86)%\viewfd\graphic\shiftrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\selection\is-1354s.tmp to %ProgramFiles(x86)%\viewfd\graphic\selection\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness2\is-c89ts.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness2\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-f121p.tmp to %ProgramFiles(x86)%\viewfd\formulas\heart.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-72pfq.tmp to %ProgramFiles(x86)%\viewfd\formulas\hypocycloid.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-m8fq6.tmp to %ProgramFiles(x86)%\viewfd\formulas\lissajous.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-u2d3c.tmp to %ProgramFiles(x86)%\viewfd\formulas\pascal's limacon.cfl
from %ProgramFiles(x86)%\viewfd\formulas\is-7kbri.tmp to %ProgramFiles(x86)%\viewfd\formulas\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\3dturn\is-uib7q.tmp to %ProgramFiles(x86)%\viewfd\graphic\3dturn\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-1oc59.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cfcpr.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring1.ini
from %ProgramFiles(x86)%\viewfd\forms\is-iied8.tmp to %ProgramFiles(x86)%\viewfd\forms\readme.txt
from %ProgramFiles(x86)%\viewfd\formulas\is-i18jk.tmp to %ProgramFiles(x86)%\viewfd\formulas\aastroid.cfl
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-p846t.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-8kcdo.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-47qlf.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-cpg7b.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\contour2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-tnbos.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-t8c9s.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-l98t3.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-df1kb.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\relief2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-rhlst.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-be67d.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\brightness.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-27p68.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\ccontrast.ini
from %ProgramFiles(x86)%\viewfd\data\is-ttnqk.tmp to %ProgramFiles(x86)%\viewfd\data\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-q8jbo.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\readme.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-6t07q.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white2.ini
from %ProgramFiles(x86)%\viewfd\7-zip\is-mkhvq.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7-zip.chm
from %ProgramFiles(x86)%\viewfd\7-zip\is-mr5cp.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.dll
from %ProgramFiles(x86)%\viewfd\7-zip\is-4jgcr.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7zg.exe
from %ProgramFiles(x86)%\viewfd\7-zip\is-6919b.tmp to %ProgramFiles(x86)%\viewfd\7-zip\7z.sfx
from %ProgramFiles(x86)%\viewfd\backup\is-p3v54.tmp to %ProgramFiles(x86)%\viewfd\backup\readme.txt
from %ProgramFiles(x86)%\viewfd\browser\is-mcbi8.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr1
from %ProgramFiles(x86)%\viewfd\browser\is-194v4.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr2
from %ProgramFiles(x86)%\viewfd\browser\is-daknr.tmp to %ProgramFiles(x86)%\viewfd\browser\default.wbr4
from %ProgramFiles(x86)%\viewfd\browser\is-29vcj.tmp to %ProgramFiles(x86)%\viewfd\browser\readme.txt
from %ProgramFiles(x86)%\viewfd\7-zip\lang\is-2v3uf.tmp to %ProgramFiles(x86)%\viewfd\7-zip\lang\ru.txt
from %ProgramFiles(x86)%\viewfd\colourschemes\is-fv7in.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\attributes.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-b9f9n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\blue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-upvl2.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-qbi7v.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-50r9n.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\colours3.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-29d2o.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-l34h7.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkblue2.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-p7qfn.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\darkyellow.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-7hjng.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\silver.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-tljam.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\white.ini
from %ProgramFiles(x86)%\viewfd\colourschemes\is-1an8g.tmp to %ProgramFiles(x86)%\viewfd\colourschemes\black.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-snucu.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-520ne.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\anyset\is-gcbf6.tmp to %ProgramFiles(x86)%\viewfd\graphic\anyset\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\barrgb\is-834m2.tmp to %ProgramFiles(x86)%\viewfd\graphic\barrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-76poe.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd1.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-95pl6.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd2.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-cb0p3.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-qkihr.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd4.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-1uq7u.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd5.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-ioipk.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd6.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-d5g2c.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\viewfd7.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-7qmv8.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\metallic\is-o585u.tmp to %ProgramFiles(x86)%\viewfd\graphic\metallic\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\new\is-9qfml.tmp to %ProgramFiles(x86)%\viewfd\graphic\new\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\radialrgb\is-mukmh.tmp to %ProgramFiles(x86)%\viewfd\graphic\radialrgb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\saturation\is-g9ij3.tmp to %ProgramFiles(x86)%\viewfd\graphic\saturation\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-rk8k7.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-a81l1.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-r5t1b.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\blurring3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-1i585.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-mjiog.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-05khf.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\compromise3.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-b5sii.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness1.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-hh8d6.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness2.ini
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-aptsi.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\sharpness3.ini
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-rb945.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright2.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance2\is-ir7ki.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\inscriptions\is-jvviu.tmp to %ProgramFiles(x86)%\viewfd\graphic\inscriptions\copyright1.ini
from %ProgramFiles(x86)%\viewfd\graphic\illuminance\is-805pn.tmp to %ProgramFiles(x86)%\viewfd\graphic\illuminance\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\brightness\is-hss9n.tmp to %ProgramFiles(x86)%\viewfd\graphic\brightness\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-1tq2b.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\negative.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-f1tcj.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization1.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-jauc3.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization2.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-mit6v.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization3.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-n60vf.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization4.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-bobla.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\solarization5.ini
from %ProgramFiles(x86)%\viewfd\graphic\cb\is-hl0ap.tmp to %ProgramFiles(x86)%\viewfd\graphic\cb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-lpbvc.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\normal.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-da3kk.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\outlining.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-0ql64.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ect1s.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6ht1p.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\picture3.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-6p0bi.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thick.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-ul9fp.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\thin.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour\is-7pq53.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-lc4gs.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-4rji0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\picture2.ini
from %ProgramFiles(x86)%\viewfd\graphic\contour2\is-hqen0.tmp to %ProgramFiles(x86)%\viewfd\graphic\contour2\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\is-jjec6.tmp to %ProgramFiles(x86)%\viewfd\graphic\ellipsergb\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\grids\is-pec3d.tmp to %ProgramFiles(x86)%\viewfd\graphic\grids\readme.txt
from %ProgramFiles(x86)%\viewfd\graphic\sharpness\is-h6kso.tmp to %ProgramFiles(x86)%\viewfd\graphic\sharpness\readme.txt
from %ProgramFiles(x86)%\viewfd\is-d6r7b.tmp to %ProgramFiles(x86)%\viewfd\viewfd.crc

Network activity

Connects to

'so###como.gq':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?08######

HTTP POST requests

http://so###como.gq/new/net_api

UDP

DNS ASK so###como.gq

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{E611A93F-EC60-4AD7-A3C8-3D5DC3E02E40}'

Creates and executes the following

'%TEMP%\is-ssb8k.tmp\is-a5j23.tmp' /SL4 $C0126 "<Full path to file>" 7219787 141312
'%ProgramFiles(x86)%\viewfd\viewfd.exe'
'%ProgramFiles(x86)%\viewfd\viewfd.exe' 1c53633ef7b592f87fdf664078d5b3a5

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "ViewFD_3.5.1.0"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней